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(54) PUBUC KEY CRYPTOGRAPHIC METHOD/SYSTEM 

(57)Abstract: 

PURPOSE; To attain the ciphering by means of a single 
cryptogram by using the double cycle, i.e., the characteristic 
of an elliptical curve to use one of both cycles for the 
ciphering of a written message and the other cycle for the 
generation of random numbers in terms of probability 
respectively. 

CONSTITUTION: In a public key cryptographic system that . 
assures the communication secret between a transmission 
device 100 and a reception device 200, a public key is 

generated by means of an operation carried out on an f / " ^IW^K 

elliptical curve. When a secret key is generated, a remainder 
operation and a well pairing operation are carried out to the 
cryptogram received from the device 100 by means of a key 
generation/register means 250. Then a discrete logarithm 
problem is solved to the result of the weil pairing operation. 
Thus the cryptogram is restored into a normal message by a 
decoder means 260 of the device 200. In this respect the 
device 100 includes a cryptogram generation means 110. 
Then the means 250 includes a parameter generation means 

204 which decides the parameters of a total number (n) and the elliptical curve, and a point 
generation means 203 which decides two points (G1, G2) on the elliptical curves En (a, b) in a 
remainder operation that defines a synthetic number (n) as the modulus. 
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mmiE^mimxit. 

^^En (a, b) JiCD2-^ <Gi . Gz ) ^^<S^>. k. 
n, a. b, Gi . G2 '^HiTtB^rja^i: 

SLSftr ^±mL. 

En (a. b) JKOMIB-^fiSiSn ^Jit-r-^fj^M^f^ 
L. c=mGi +rG2 ) ^^J£^^|f55t3^1 ia^C7>^ 



^mm [^xm^x^±f&ir:^m^x^f&^^^^ir:^m 

^;SISn^t;^Rffij^<D/\'^^-^ (a, b) ^^i^)^ 
+i R ft *S/ ^ ^ - ^ ^Hg^S <t . 
l^^idtSE n ^ ^ ^ -r ^ fiJ^jUg: f it ^ 1S:^R ft E n 
(a. b) _tcr>2j^ (Gi . G2 ) ^^i^)^^Rft^-b 

iStiRft5^/^^^"^^iife^l&fCj;y^jS^;n-fcf*/^^ 

^-^ ca, b) :kummF]mm±^.±f&^mz^*')± 
jS^inz-fSs,-^ (Gi . G2 ) ^mi-^x^i^mmk, n. 
a. b. Gi , Gz i±f$,-i-^'M^m^m^mt. 

^^t^-^^^tm^^ mmo <^ mm eg^ v x a . 
n^mi^x^mn^m^m^m^. mmm'^yc^m.^i-^ 

mia^^issj^y Hfrie^rffin Ck. n. a. b, gi , 
G2 ) ^Ati-t^^j^mmAti^^t. 

ffifi:3tm$^L\Tl5lBfSRffiSgEn (a, b) -L<D;1I^ 
"^^^-Xo ({0L, c=mGi H-rG2 ) f=Bt-§-^tr^ 

[0001] 

mm^Mi^:^'rA\zm^). n\z^ mmiiii i^x-xAic^s 
i>xmm<o^m^mitLxmm'^^nz>'^mmm^:fj^ 

1" ^ <a^r^f1 fflf -^Sr ;a U^^^ PjB® B^-^ V X T A ic 

[0002] i$L<ii. i:>^)Ut^tLfzxm^Bm. 
r^mz. mF^^mizm-oi'^x^i^mmm^^mi^x^^ 

[0 0 0 3] 
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Lr. GDldwasserirWrcal immm^t^m 
A$jKTL\'5>(Goldwasser, Hicali, "Probabi I istic En 
crypt ion/' SI AM J. Computing (1984))o 
[0 0 0 4] ca)"Goldwasser ^tMicali" IzJ^-SS^,^ 

fi. 1 h(7)ft«m CmfiOJ£l^1) $ 

[O O O 5] 

J- r 2 aod N IF ni= D 
0= 10 
I- a 7 = IF m = 1 

emu. N. ati^&3M. rliSLiic) 

[0 0 0 6] a>j:^f:iai-^'fbLTL^^o ca)B#cD0i-^:S: 
fi. ^iag|a)th-f X^hi^lti (BI&5 0 0 h) ^^^cC^o 

[0 0 0 7] ^fc. «£5fe(Dm2(i)^/ilfim0g'^(7):^;i<tL 
"C^ Cohen (Cohen,Hischer,"A Robust and Verifiable 
Cryptograph ica My Secure Election Sechme", Proceed 
ingofFoundation of Computer Science, pp. 372-382(1 20 

985) cD^s5^fo^(7)sisi=so'i^r. ^^ymm'^moy^ 

t: 

c i= a " • niod N 

tl^v^=b\z.'m^^t-t^ (iSL, a. N, L CLCO-9--Y 
[0 0 0 8] 

[^0^A^®^LJ;5<tt-'5i^m] LA^L. ±IBCDtS*tD so 

-So 

[0 0 0 9] ^f-^ ±uco'^^C}'m2.cr>^mt. ^^feSiJ 

[0010] m^\t. ItfgmA^I O ^ y h-efe^i^-^ 

li. o-a^t^ - 1 £D 1 0 2 4^y cD:^rc7)ffl^ffi-^itic 40 

[001 1] :*:^0^li, _bfB©jSf-^^/j:^;jxfct.co 

A^^^^t-r ^ - ^^mmtr^. so 



[001 2] 

[^iiS«j^'r«»^iA6cD^K] milt. *^0jcoi^ii^ 
[0 0 13] :^m:^(D^j>mm^^ijm±. ^mmmt^ 

[0 0 14] ^fc. glilSMtcjjuT. ^rjri^:&tj;^ij^ 
tBlSRfls^a)/^^^— ^ Ca. b) ^t>fc. 

fife^n ^>^^-r^ilJ^;1ll:fCfcMt^^Rffl^^En (a. 
b) ±<DZ^ (Gi . Gz ) S-^ib. k, n, a, b. 

Gi , G2 ^^z^r^mtL. ■Bm.^n(Dmm^^mmmt 

[0 0 15] ^fc. itmSMfcfeL^T. m^:Pi^^fSi-t 

'^^^mm■Xvr^^ml^X. ^Rffl^En (a, b) ±0? 
^trtV 0&^:^c ({EL. c=mGi +rrnG2 ) 

[001 6] ^f-. ^glSSfrjsLNr. 

'7^m-^in^fz.mm\^ni^x^ ^^^^zLnmn^m^. 
^:i.-^m%<Dm^m:^^\^xmm.nm^m.^f^^. mm. 

[0 0 17] ^2f^. :!^^ma:>mwmj^mx^^. 
[001 8] ;$:^0^(i. i^i^i^si o otmnmrn-z o 
o r^i coaii mm * stiE-r ib^b^^ v a a f c fc l^ 
^Rffi^±cD;ii^^frj^Lr<^r?fiii$^;gLr^f^fi 
L. ^^a^^/SL. s^-r-^^ijs - ^it^iS2 5 o 
iUfSSi o o^ y^fiLfc0§^:S:i=>?fLr^ij^it 

^■r'Sm^^^2 6 0i:^:S'r^^mSM2 0 0<t. ^ 
^Sm2 0 0A^t>^|F1S^A^L. 4SRfflJ^±(D;1im^ 

5pjfflLXBi^:fc^±j*^^&i^-^:^±jiJc#^i 1 0*^^ 
[o 0 1 9] ^fc. ±.m(Dm^i^ • ^m^^2. so{±. 

■^m.^n^XSmF]^m(DJ^^ (a. b) ^^^^ 
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tz/^"^:^-^ Ca, b) ^U:MRffl«l_t;^^J^£#IS2 O 
3i::i:y*^**xfc2jS (Gi . G2 ) ^mi^x<ikmm 

k. n. a. b. Gi . Gz ^^l^tt ^<^mm^^^^ 

mm&^^^^^ sot 

[0020] ^fz. ±m<o^^^mzeo\±. ^mmw: 

t-^S^W¥^l£2 2 0i:^#t% 
[002 1] Sfc. ±fE<^fiil«f^lS2 2 o(±. iSStS^Sfe 

[0 0 2 2] ^fc. Jzf3a>Bg^:S;*jS^I^ 1 1 of±. g 

111^^2 O O^ Ck, a. b. Gi . 

G2 ) ^AtiT^^j^mmxt^^m^ 07 ^mr^^ 

y ± ^ ;|x f-a r ^ A $ ;K 5Hi:S:m ^ ^ S L^x 

RfigjEn (a. b) ±(OmW^^f!cmn^>^tr^m 
m^SlSlm^B^-^ZSCc ({BL. c=mGi 

[O O 2 3] 

[0 0 2 4] ^/c. m-^Jlfl^-ei*. '^x^'n^ (ISg* ^ 
50:31^^, Vo I. 3 4. No. 2, 2^*^(1993)) ^ 

[0 0 2 5] 

[HJfeW] ^3f±. *ieB^©>'Xi^Affi/$^;^ii-. mm 

J-^JL^r. ^MitS^l OOi:^figM2O0:6^iim[i]^ 

^3 O o^^A-u-c^St^+i-ct^^o aiigS2 0oii. 

^±JS - ^Iia52 5 O 1I'^^2 6 O J: yffiK!c^:ix 

If^mm^CD/^^:^ — ^ (a, b) ^|£^L. 

fCfclt^+SRffl^lSEn (a. b) ^CD2;^ (Gi , 

Gz ) ^^^L. ^f^mn. ^fe.l>V-?^;^-^ a. h^^jk 

mmtL. ^fc. -^nESi n ©finite Lx^^^t 
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[0026] MLm:i^mmm:<Dm±i^ ■ ^^as 2501= 

[0 0 2 7] [gji^S : " gSai] ^4f±. * 

^\Emm.z o o(Dm^^ ■ ^is^2 5 of^. mm± 

jS^20 1. mmmzDZ. ^tRfflJS/^^;^—^^/?^!!: 

2 0 3. ^RfflJ^±jS^/$f|2 0 4. SlJ^^JlMa:^2 

10 0 5. ^mm^zoe. :^^J^^f&St;15S:^2 0 7.fcy 

[0 O 2 8] ^tSC±jSS2 O 1 ^gSCp. q^ijS: 
mff^2 O 2:35:t/^Rft^/<^>— ^^fife^2 O 3 
:S:U^*gRtt*SJL,^±/3c^2 o 4fct±i:^^^. ^^^2 0 

v^^y— ^ifi]£|^2 o 3[±, A:^3$Hfcmifcp, 

Sfea. bfCMU. Cap , bp ) , (aq . 

bq ) *^Rft^±#.^;ifeS2 0 4. StJ^S?l;m*2 

20 J?E^2 0 4fi. tfRffi^/^^>— ^±J^it^2 O 3 cfc y m 
±r^^f-/<^pt— $1 Cap , bp ) , Caq , bq ) i: 

^Sfei;si^2 o 1 j;ya*^tLf-msfep, qicj^y.- 

Si^SS CGlp. G2p ) . CGlq. G2q ) ^^^J 1^-^ . 

[0 02 9I ccr% mF\m^ti±. mmpti^M^. 

y2 = x'* +ax + b Cmod p) 
Ep Ca, b) 

Kx^m^^^m^^i^^. 

30 [O O 3 O] S^iz. ii]*^^;1llC§&2 0 5fi. f^3ilAf[J 

^^^iccfc y¥:3t^^A6^^;CDT'&y. 4gRffl?a/^^>« 

— r?iJ^I^2 O 3 ci: y a:l::b^;Pu^/%"^p« — Cap . b 
p ) , (aq , bq ) tmF^l^U±.^±f^^2. O 4t^i^ 

mt^^^^:::~MmM CGip, Gip) , CGiq. Gzq ) ^ 

fflL\'T:4^11A^lJ^^S[::S':^0^r a, b. Gi . G2^ 

1+^^-6. mgits^ 2 o 6 fi. ssfc^js^ 2 o 1J: y 

ffi^^tbfcmSStp, q. tfRffl^-!i,^±;5)(:^2 O 4;6^t. 

ai:^j$;tx/c"Si^ffl CGip, G2p ) . CGiq. G^q ) 
4tRffl5^/^7^"^^/^£^2 0 3 J:ytti^)*:*xfz/'t 
40 ^ Cap , bp ) . (aq . bq ) ^^t^T. ^ 

^ CNp . Nq , Mp . Mq ) ^:^46^o ^46tj;Kfcfi 
l&fi. m^h^eSSiM^^2 O 7fcA^JL. fi^Np . N 

CNp . Nq ) ^^^^n<^>^Il]Sil.t L. ^^^i:LT 

[0 0 3 1 ] [M 5 f^. :4^^5jco--ii]Ste«?'jcD^^j$ ■ m:m 
[0 o 3 2] o 1 ) m^^f^^z O 1 ^ 

50 [O O 3 3] O 2) ^»^2 O 2 36^ MWi^ 



^MW-S- 1 0 2 7 3 4 



[0034] 03) 4SHffl^/^=7>«"^i^ 

ti^^t^ 4SRfti^a)/<^^— 5? Cap . bp ) . 
Caq . bq ) $:l£^-r^o 

[0 0 3 5] o 4) ^Hfflil±/Sii*S2 o 

/^^^"^ Cap . bp ) , Caq . bq ) tm^±f^ 
SSMt-StgRfflJ^Eti Ca. b) J:a)2j^ (-MJISS CG 

tp, G2p) , CGlq, G2q) ) ^15^^^^. 

[0 0 3 6] 0 5) frj^S3^;^^§§2 

0 5[±. =tfRft^/<^pt— 5'^fiSc^2 0 3 cfcy A^r^n 

Cap , bp ) . (aq , bq ) i:^Rffl 
^±;a^JS^2 O 4;^)^t>A^^^tv^-mJ^^ CGip, G 
2p) . CGiq. G2q) ^ffl L^T AilJ^^SI=S-:5L^ 
X^^mM Ca. b) . (Gi , G2 ) ^itS:^^. 
[0 0 3 7] ^BS^fi. 

a = a p Cmod p ) > 20 

a = a q (mod q ) , 

b = b p (mod p ) , 

b = b q (mod q ) , 

Gi =Gtp (mod p) I 

Gi =Giq (mod q) . 

G2 =G2p (mod p) , 

G2 =G2q (mod q) 

[0 0 3 8] 0 e) ^miW^2. o ei*. m 

i&ijS^2 O 1 JcyA:^J$ttfc^iap. q. «Rffl*^-t 30 
G2p) . (Glq, G2q) tfRfflJ^/^^ ^ 

20 3^^)X:h^Hfz/<'y:^—'^ (ap . bp ) , (a 

q . bq ) ^fflU-C. ^J^TO^^^^^^. 

[0 0 3 9] Np = ordp CGip ) 

Nq = Ordq CGiq ) 

Mp = ordp CG2p ) 
Mq = ordq (Gaq ) 

±m<Dikmt^p it. Mp cD$^]^&-e&y. Nq it. Mq <d 

[0 0 4 0] Ai^^:/7^1 07) S^Jv^fS^;1l^ii2 O 7 
(i. Ax^v:::*'! 0 eizj: y ^tf)-b:at=:<iSScNp , Nq \z 
4: y:^/Jv^{SifeL CM (Np . Nq ) ^t+fff^o 
r% k+ 1 ^S/J^^e^^(LCM (Np , Nq ) ) CDt' 

[O O 4 1 ] xi^';/::^ 1 O 8) ±fB(7>m^P. q ^SS^ 

iitur&j^L. -^f^mn. ^ {a, b) . m 
CGi . G2 ) ^xsm^\^<^i^m(D\z-^ \- 
v-^xw^^j^mmt^^o m-^. ik. a. b, g 

1 , Gz I ^<i>:mmtLx<i^mi-^a so 



[0 0 4 2] ;^[::. iM<tgSi 0 o l^':>i^-ci$£^^^o 

[ o o 4 3 ] [jintsa] HI 6 it. ^^BM(D-mmm<D 

^J^Ji^*ffiL\x§ii^S^2 0 oicjiHl LfcL^aji:Scm 
^Bg-^itL. ftg^S:c^fflAi-r^^RflJ^3IS:Si 0 9 

[O O 4 4] :KRffi^>1§^||1 O 9f^. ^•ft^^2 O 0 
^•^ihAti^^t^^J^mm (n. a. b, Gi , Gz ) . 

IS^^Si os*^t^A^]*^^fcaiacr:SLtP^l^t:^tm^^ 

c=mGi +rG2 over En (a. b) 

L. mGi I^. Gi +Gi +— Gi Cm[E]) ^^iftt" 

^Rflife±(7)jM^ it. nt:mti-^m\^mm 

mTCti||^l?^#ffB^tLf-L\o N.Koblitz/'A cojsr 
se in number theory and cryptography/' GTM-114, Sp 
ringer-Verlag,New YorkCl9a7) ) 

[0 0 4 51 m7\t^ :$:mMo>'-mmmo>mnmm(Dm 

[0 0 4 6] ::^'fyzf2 o 1 ) iSltSSi oocD'^mm 

[00 4 7] :^^yyZO Z) ^^tlSS 2 O O fzi^m L 

[0 0 4 8] P^'r^yZf^O 3) ^^litS 2 0 O Tr±Jic* 

tLf-^j>mmn, a, b. Gt . G2^A:tlT^. 

[O O 4 9] X^^y:/2 O 4) il^^t^Ml O Oi*. I^ife 

iaiI:^Cm. ^J^mmn. a, b. Gi , G2 ^fflL^ 

-C. IfRftffiEn Ca, b, > ±05*J*jSS:^m[El^y 

Jg-r. PL<fi. iLSSEri:^/^rs1^G2 ^^jJcLT. rG 

2 ^iJ^L. iHl;S:m^-i:tlfl^Gi ^^iSLTmGi ^ 

^jdt-r^o rG2 ,tmGi ^-^f&i^xm^^c^ 

[0 O 5 O] OS) iMit^S 1 O Oft. Bf-^ 

[0 0 5 1 ] ^m^mzo ocd^^^z e ofno 

[ O O 5 2 ] [©{fgS : H-^ai] ^ 8 ii;. ;:$:^0^CD- 

m^m 200 oom-^Sfj 2 6 o fi. sd*ja^s& 210. ^ 
x-f zlM;1iw^2 1 1 a. m^ii^wimm^z 1 2. 
:sLUfSij^^^3i^^2 0 5^:^r^o c:cd3*>. i^mi:: 

fel^r^"x-r^5^.=ll^^2 1 1 A. 2 11 BrD2 0:6<# 
4i<tL^o Atli:bA^2^i^fe^fcfi^>fc|ESiJUT 

2 5 o mim^mmw-^ zost mmxh y . -m<Dm 



(6) 
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[0 O 5 3] m^^%^2 1 Oi±. iMfilS^I O OTbv^ 

* ^1:=. ^Rffl3^±a)iSGlp , Glq, G2p, G2q 

<^s*;ii^S2 1 1 A, 2 11 Bit^jL^zL^mn^^vf 

[0 0 5 5] X-r^;/7^30 1) g1fSS2 o O0)ilJ^36 
[00561 cp =c mod p r 

C q = C mod q 

[0057] :^^^:/'^302) y 3 O ^ 'X:^isbt:z 

2 5 0<D^Hffl^Ji;^^^^2 O y ^jS$:h.fct6 

Rffl^J:co^ (G^p. G2q) ^^:^-(=Lnmnm^^ 1 

AfcA^J-r-So ^/i:. Si^^ ■ ^itai2 5 0®SR**jg 
ip. Glq) . (Gzp, G2q) ^fe:tX:^P3fi^JlCD*&.(D{i^ 

Mp , Mq ^^^x^^S^;1SS^2 1 1 Bl=A:?:jr^. 

[0068] X^^^7^'5\>3) ^ic-f a.5tf;1|^^2 2 1 

Afi. {iSfcMp , Mq .tfij^;1l^§§2 1 oroai^icp . 

cq :&ti^tgRffi^Jl(7),$. CGzp. Gzq) ^ffiL^'C^:iT(7? 

-^(1 9 9 3) ^^T5a 
[0O59ljep=eMp Ccp.G2p) 

J9q =eMq (cq . Gzq ) 

[00 6 0] ^^d. r^"x'ir^3fef;1Sa:^2 2 1 Bf*. A 
-h^^f^mn^^^a:^^ (Gip, Glq) . CG2p, 

Gzq) 'JkXS^^V\^m±.<y>^^<O^^M^ , Mq ^^l^T. 
\>XTK^^}%2.0:>^:r'< ZLna^ . ofq 
[006 1] ffp ^eMp (Gip. G2p) 

ffq = e Mq (Glq , Giq ) 

;^.^^:y:;^3 0 4) ;^jfc. ^^X'i'zL^;1IS^2 2 1 A. 2 

2 1 BC0;1IW^S^jffp. j9q . Ofp . GJq . S'h^i^fSSfc 
Np . Nq . ^*S[p, q^SI^Mi&>1lff^2 1 Z{Z.7^± 

[0 0 6 2] x^^>:::''3 os) Sitfe^^;^g:^2 1 2 
[i. A:*3^;h.fcjSp . jSq . o;p . orq . :^/h^{^IJS[N 
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p . Nq . ^iftp. q5ffll^T. )>xT(o^^m^'t^m 

ife*f3SCD«mp , mq 
[ O O 6 3 ] jS p = Qfp *"P mod p 
j8 q = Q? q mod q 

JI|ac^>Mv^1i5^^$|^ENp . Nq [±±iacD^7!)^t);S^ 

-Cl\^3&<. QTp . ap GJfiSEA^Np . Nq 

ffiL^Tmp . mq ^ *^^) ^ tc4^>co A:^) L -Cie^^T? ^ 

10 [0 0 6 4] XT-^y3^3 0 6) ^SfeS^^;1I^C^)g¥mp . 

[0 0 6 5] 7.^7-^:^3 01) ^mxm^.'&mmM^z 

[0 0 6 6] 

m = mp (mod Np ) , '"3) 
nn = mq (mod Nq ) ■■■ (g) 

Jhi2<D®:a.tjJ<2)S^RE-r^ci:ic^ ¥:5tm^^tb^ 

20 

[0 0 6 7] JltBC0||^S^^J(?5.fe3l3. i^t*^li^<M^d: 
$^T5=feO?T^fe^. ^^J^[*. -^Jife^gfe n 5 5 O O 

B§^:Si:cfi1 o o 0 h^lkttl 
[0 0 6 8]^fc. h-t^-f Xk ^M^f^. loot: 

1 0 0 o e^y h<r>^^:X\z^^r^:itt^-^mx 
^^(i. 1 e^:; S(7)¥itfc>^ LT5 o o tf ^> hc^) 

fc3b<. ::*:^BJ(c^;h.f^s 100/1 000=1/101::: 

[0 0 6 9] 

— ^^S§^l::il'b^::<^^::<fcy. m'^U^^^m\zv V--^ 
'I'Xkf^iJ^L-Ck e^y h<7)iHt3t^i ocDBg-^;S:cfz&i 

[0 0 7 0] «-^^bS?i51l^, ^^x-<a.^it^i:^ 

tS^iJltJi^^. Vol. 34. No, 2,2 ^-^(1993)) Xz^^^ 

^ty^=bizr^\t. -mmimm%^^mmz (k(7)^js 
[0O7 1] ctLf^j:y. ^^£*(7>:;^xtf3Jt-<x. 

[|^S(7)SSm^ci:i5£e3] 
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